vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill invokes system commands such as
vercel deployand runs a local bash script (deploy.sh) to automate the deployment process. - This behavior is necessary for packaging projects and executing CLI tools, which is typical for development and deployment utilities.
- External Network Interaction: The backup deployment script utilizes
curlto transmit project files to a remote endpoint (https://codex-deploy-skills.vercel.sh/api/deploy) for processing and hosting. - This communication is aligned with the core function of publishing assets to a cloud provider. Notably, the script implements standard security practices by explicitly filtering out sensitive local files such as
.env,.env.*, and.gitdirectories before packaging.
Audit Metadata